安装和配置认证服务

3.2.2安装和配置认证服务目录1.创建与同步数据库4.设置环境变量3.创建签名密钥和证书2.创建令牌231.创建与同步数据库

Host1#控制controller节点安装软件包[root@controller~]#yum-yinstallopenstack-keystonepython-keystoneclient41.创建与同步数据库

Host1#控制controller节点创建keystone数据库，使得所有主机能够访问并操作keystone数据库命令如下：[root@controller~]#mysql–uroot–pmysql>CREATEDATABASEkeystone;mysql>GRANTALLPRIVILEGESONkeystone.*TO'keystone'@'localhost'IDENTIFIEDBY'KEYSTONE_DBPASS';mysql>GRANTALLPRIVILEGESONkeystone.*TO'keystone'@'%'IDENTIFIEDBY'KEYSTONE_DBPASS';mysql>exit51.创建与同步数据库

Host1#控制controller节点修改/etc/keystone/keystone.conf配置文件配置数据库连接，使Keystone服务能够访问MySQL数据库。修改内容如下：[mysql]connection=mysql://keystone:KEYSTONE_DBPASS@controller/keystone在MySQL中创建keystone数据库表[root@controller~]#su-s/bin/sh-c"keystone-managedb_sync"keystone62.创建令牌

Host1#控制controller节点[root@controller~]#ADMIN_TOKEN=$(opensslrand-hex10)[root@controller~]#echo$ADMIN_TOKEN[root@controller~]#openstack-config--set/etc/keystone/keystone.confDEFAULTadmin_token$ADMIN_TOKEN73.创建签名密钥和证书Host1#控制controller节点[root@controller~]#keystone-managepki_setup--keystone-userkeystone--keystone-groupkeystone[root@controller~]#chown-Rkeystone:keystone/etc/keystone/ssl[root@controller~]#chmod-Ro-rwx/etc/keystone/ssl84.设置环境变量Host1#控制controller节点启动认证服务并设置开机自启[root@controller~]#serviceopenstack-keystonestart[root@controller~]#chkconfig

openstack-keystoneon94.设置环境变量Host1#控制controller节点设置环境变量[root@controller~]#exportOS_SERVICE_TOKEN=$ADMIN_TOKEN